CONFIDENTIALY POLICY

1.  CONCEPTS
1.1. Data controller – UAB ‘Baulera’ (the Company), company’s code 304114730, registration address Vilnius City Municipality, Vilnius City, Architektų str. 56-101, email info@buhalteria.lt.
1.2. Data subject – any natural or legal person whose data is processed by the Company. The data controller collects only those data of the data subject that are necessary for the performance of the Company’s activities and/or when visiting, using, browsing the Company’s website (hereinafter – the Website). The Company ensures that the personal data collected and processed will be secure and will only be used for a specific purpose.
1.3. Personal data shall mean any information relating directly or indirectly to a data subject whose identity is known or can be directly or indirectly determined using relevant data. Processing of personal data means any operation performed on personal data (including the collection, recording, storage, editing, modification, granting of access, submission of requests, transfer, archiving, etc.).
1.4. Consent means any voluntary and deliberate consent by which the data subject consents to the processing of his or her personal data for a specific purpose.

2. SOURCES OF PERSONAL DATA
2.1. Personal data are provided by the data subject. Using the Self-Service System of the Website, the Data Subject fills in or changes the data about him/her, contacts the Company, uses the services provided by the Company, leaves feedback, asks questions, applies to the Company for information, etc.
2.2. Personal data are obtained by the Data Subject visiting the Company’s Website.
2.3. Personal data are obtained on the basis of consent. In cases where the data subject has expressed a wish to receive information or to express an opinion on specific services, personal data may be processed in order to ensure that the data subject is provided with the necessary information. The data subject has the right to withdraw the consent given to the Company at any time. The consent shall be valid until it is fulfilled or, as the case may be, revoked, whichever is the earlier. Withdrawal of consent shall not affect the lawfulness of the processing, which is based on the relevant consent given before the withdrawal.
2.4. Personal data are obtained from other sources. Data are obtained from other institutions or companies, publicly available registers, etc.

3.  COOKIES
3.1. The website uses cookies. A cookie is a small text file that a website saves on your device when you visit it. These cookies are required to ensure the proper functioning of the basic functions of the website.
3.2. By using the website, the data subject agrees to the storage of cookies provided by the Company on his/her device. This consent may be revoked at any time by the data subject by changing the settings of his/her web browser, however, in such case some functions of the Website may not work. To learn more about cookies management, visit: http://www.allaboutcookies.org/manage-cookies/.

4.  PROCESSING OF PERSONAL DATA
4.1. By providing personal data to the Company, the data subject agrees that the Company will use the collected data to fulfil its obligations to the data subject and to provide the services that the data subject expects. Personal data are required for the Company for the following purposes:
4.1.1. Concluding and executing contracts with the data subject for services provided and received by the Company; maintaining contacts by ensuring that they can be contacted; Tax accounting and contribution control. For this purpose, we collect the following data: name, surname, address, telephone number, e-mail, information on the ordered services and information related to their provision, date, number and other data of the contract for goods and/or services, start date, end date, duration of the acquisition and/or provision of goods and/or services.
4.1.2. Ensuring the quality of telephone consultations on the Company’s services by improving the quality of customer service, controlling that information is provided in a qualified and expeditious manner. For this purpose, we collect the following data: the date, time, duration of conversation, telephone number and data provided during the telephone conversation, which can be recorded when the data subject calls the Company.
4.1.3. For the purpose of ensuring the security of the Company’s employees, other data subjects and assets (video surveillance). Video data can be captured by video surveillance equipment installed by the Company when the data subject visits the Company (if a person can be identified).
4.1.4. For other purposes for which the Company has the right to process the personal data of the data subject, when the data subject has given his/her consent, when the data are required to be processed in the legitimate interest of the Company or when the Company is obliged to process the data by the relevant legal acts.

5.  PROVISION OF PERSONAL DATA
5.1. The Company undertakes to respect the obligation of confidentiality vis-à-vis data subjects. Personal data may be disclosed to third parties only if this is necessary for the conclusion and performance of the contract for the benefit of the data subject or for other legitimate reasons.
5.1.2. The Company may provide personal data to its data processors, who provide services to the Company and process personal data. The Company‘s Data processors have the right to process personal data only in accordance with the Company’s instructions and only to the extent necessary to properly perform the obligations set forth in the agreement. The Company shall employ only those data processors who sufficiently ensure that the appropriate technical and organizational measures are implemented in such a way that the data processing complies with the requirements of the Regulation and the rights of the data subject are protected.
5.1.3. The Company may also provide Customers’ data in response to requests from courts or government institutions to the extent necessary to properly comply with applicable laws and regulations of government institutions.

6.  STORAGE PERIOD OF PERSONAL DATA 
6.1. Personal data collected by the Company are stored in printed documents and/or in the Company’s information systems in electronic format. Personal data shall be processed for no longer than is necessary to achieve the purposes of the processing or for no longer than required by the data subjects and/or provided by law.
6.2. Although the data subject may terminate the agreement and refuse the Company’s services, the Company must continue to retain the data subject’s data due to possible future claims or legal claims until the data storage period expires.

7. THE DATA SUBJECT’S RIGHTS
7.1. To apply to the Company with a request to provide information on whether the personal data of the data subject are processed in the Company, and if so, you have the right to access the personal data processed in the Company (right to access personal data);
7.2. To apply to the Company with a request to correct personal data and/or suspend processing of such personal data, except for storage of data –in case it is established that the data are incorrect, incomplete or inaccurate; (right to request to correct personal data);
7.3. To apply to the Company with a request to delete personal data those are processed only with the consent of the data subject if the data subject revokes the relevant consent. This right does not apply if the personal data requested to be deleted are also processed on another legal basis, such as the processing necessary for the performance of the agreement or there is the performance of an obligation under applicable law (the right to request to delete personal data);
7.4. To apply to the Company with a request to restrict (suspend) the processing of personal data, except for storage – in cases, for example, when correction of personal data is requested (until the accuracy of personal data is checked and/or corrected), when it is established that personal data is processed unlawfully and the data subject does not consent to the deletion of data, when the disagreement with the processing of personal data (until it is assessed whether the legitimate interests of the Company prevail) and etc. (the right to request for the restriction of personal data processing);
7.5. To apply to the Company with a request to transfer personal data which are processed on the basis of the data subject’s consent or performance of the agreement – you have the right to request the transfer of personal data provided to the Company, which is processed by automated means, to the data subject and/or another data controller in a structured, commonly used and computer readable format (the right to request the transfer of personal data);
7.6. To apply to the Company and express the disagreement on the processing of personal data when the processing of personal data is carried out on the basis of legitimate interest (the right to express the disagreement);
7.7. To request that the data subject should not be subject to a decision based solely on automated data processing, including profiling, which has legal consequences for the data subject or which has a significant effect on the data subject in a similar way. This right shall not apply where such decision-making is necessary for the purposes of concluding or performing the agreement with the data subject, is permitted under the applicable law or the data subject has given explicit consent;
7.8. To revoke the consents given to the Company at any time.

8.  RESPONSIBILITY OF THE DATA SUBJECT
8.1. Inform the Company about changes in the information and data provided. It is important for the Company to have correct and valid information of the data subject;
8.2. To provide the necessary information to enable the Company to identify the data subject at the request of the data subject and to ensure that it is in real communication or cooperation with the specific data subject (to provide a personal identity document or in accordance with the procedure laid down by law or by electronic means which enable the data subject to be properly identified). This is necessary for the protection of the data subject’s data and protection of data of other persons, so that disclosed information about the data subject is provided only to the data subject, without prejudice to the rights of other persons.

9. FINAL PROVISIONS
9.1. By using the Website and transferring personal data to the Company, the Data Subject confirms that: he/she has carefully read this Privacy Policy, understands its provisions, agrees with this Privacy Policy and agrees to abide by it.
9.2. When supplementing or amending data about himself/herself in the in the Website Self-Service, the data subject must provide only correct data.
9.3. During the development and improvement of the Company’s activities, the Company has the right to unilaterally change this Privacy Policy at any time by publishing it on the Website. The changes take effect from the date of their publication on the Website.